Below you can find configuration for the AAA authentication for follwing Cisco devices:

Cisco Nexus - NXOS

Cisco XR 9002 - IOS XR

Cisco Switches - IOS

Sessions like SSH will be authenicated against the remote credentials (TACACS server), but console will use local password for emergency access when required. The full AAA will be also activated, which means check credentials, check priviledges to execute commands and log the commands.